This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/842b5b-985c-44d7-9598-039dea50694e/1/3ILSx-tfpUPjLx7uGc01pWc8-uY.mft File: 3ILSx-tfpUPjLx7uGc01pWc8-uY.mft (raw, json) Hash identifier: GYad5pgwCfcRN3mdNIfzwZ4RCq7gTDG9y56XjUolRVQ= Subject key identifier: F0:B6:54:52:6B:46:FB:9B:BD:1A:86:61:3E:00:B4:20:33:4A:23:EA Authority key identifier: DC:82:D2:C7:EB:5F:A5:43:E3:2F:1E:EE:19:CD:35:A5:67:3C:FA:E6 Certificate issuer: /CN=dc82d2c7eb5fa543e32f1eee19cd35a5673cfae6 Certificate serial: 019B2F67BBF5C1C631651E65AF5B964F2E19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ILSx-tfpUPjLx7uGc01pWc8-uY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/842b5b-985c-44d7-9598-039dea50694e/1/3ILSx-tfpUPjLx7uGc01pWc8-uY.mft Manifest number: 064C Signing time: Thu 18 Dec 2025 03:01:26 +0000 Manifest this update: Thu 18 Dec 2025 03:01:26 +0000 Manifest next update: Fri 19 Dec 2025 03:01:26 +0000 Files and hashes: 1: 3ILSx-tfpUPjLx7uGc01pWc8-uY.crl (hash: N2OaLvX1JhEQoERNgJCPa1gQ83iOf3O0G3jw9zzvvJU=) 2: Mvk_oqElVRdnhvvvd2d0ON2M6O0.roa (hash: h/FNSiffcYfhZT3VlgEkLi4vidisAmOMBIjfYdnqCDs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/842b5b-985c-44d7-9598-039dea50694e/1/3ILSx-tfpUPjLx7uGc01pWc8-uY.crl rsync://rpki.ripe.net/repository/DEFAULT/00/842b5b-985c-44d7-9598-039dea50694e/1/3ILSx-tfpUPjLx7uGc01pWc8-uY.mft rsync://rpki.ripe.net/repository/DEFAULT/3ILSx-tfpUPjLx7uGc01pWc8-uY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:18:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:67:bb:f5:c1:c6:31:65:1e:65:af:5b:96:4f:2e:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc82d2c7eb5fa543e32f1eee19cd35a5673cfae6 Validity Not Before: Dec 18 03:01:26 2025 GMT Not After : Dec 19 03:01:26 2025 GMT Subject: CN=f0b654526b46fb9bbd1a86613e00b420334a23ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:02:27:f1:c6:bc:a0:86:f4:58:2f:ba:b9:3f: 61:fc:d8:37:80:88:02:16:74:09:25:89:4f:be:2c: a4:8f:98:8d:a4:00:17:6d:11:f5:34:2c:5b:68:e7: ea:21:5e:20:c3:85:8c:56:e3:c4:ec:49:e5:f1:b3: 62:0c:61:f7:2e:84:1a:a5:4f:47:9d:37:9c:57:c1: 3a:8e:cd:89:31:21:eb:df:95:5c:ec:b2:8e:c0:a8: 63:74:d7:34:9e:87:71:31:92:15:22:2e:61:9f:5f: 73:aa:47:78:38:f4:0f:9e:a8:d9:56:48:58:57:12: d8:da:6d:f0:29:ba:7b:a0:b5:fb:22:54:e1:6e:10: 03:bd:dc:18:1e:d1:9d:15:ff:85:57:1c:26:30:78: b9:c8:2a:56:d0:17:69:60:cd:b2:b5:1b:7f:07:96: 7f:4b:f4:6c:4c:c9:cd:16:ac:b5:08:d0:60:38:d7: 96:1b:ee:a1:54:9e:68:55:bb:ba:20:b9:44:b0:35: a6:4a:0b:89:84:4b:f6:1b:66:57:a4:b1:39:67:ed: 4d:48:fc:fe:68:5e:76:74:26:ed:fe:f4:83:cc:d0: 0d:59:21:63:c3:89:9f:21:c7:a1:d7:47:f8:b0:9d: 80:d8:65:07:ce:e3:99:06:45:c5:72:3e:0f:b1:2c: f3:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:B6:54:52:6B:46:FB:9B:BD:1A:86:61:3E:00:B4:20:33:4A:23:EA X509v3 Authority Key Identifier: keyid:DC:82:D2:C7:EB:5F:A5:43:E3:2F:1E:EE:19:CD:35:A5:67:3C:FA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ILSx-tfpUPjLx7uGc01pWc8-uY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/842b5b-985c-44d7-9598-039dea50694e/1/3ILSx-tfpUPjLx7uGc01pWc8-uY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/842b5b-985c-44d7-9598-039dea50694e/1/3ILSx-tfpUPjLx7uGc01pWc8-uY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:12:f4:63:c9:e3:33:a6:ef:91:fe:28:de:27:37:34:1d:c1: fc:37:20:63:f0:63:ab:93:91:26:47:c1:ea:71:29:e8:d1:65: 82:a4:b8:ca:37:cb:4c:72:de:fe:7c:2c:ef:93:7a:a3:d0:a3: a2:82:9d:87:ba:d3:df:29:c7:61:d8:1c:e7:8b:0a:4f:0e:9c: e4:17:c8:ae:0e:da:f6:bb:93:4d:37:54:74:45:cc:2b:34:b2: e4:eb:1a:66:c9:66:6e:c7:b4:d5:03:d8:3a:dd:c1:82:64:9d: 90:f3:43:26:fb:e4:39:7b:f9:8b:7b:0c:84:70:12:8b:a8:11: c4:6b:b0:cb:3e:91:fb:1e:1e:9a:99:7d:94:55:5e:dd:31:8b: e6:7f:1e:41:b4:d3:51:5d:51:61:de:7c:fe:fb:4c:84:cd:96: 89:15:03:7d:23:5d:f4:0c:cc:98:c3:bc:ef:a9:29:80:45:da: a1:65:41:66:93:2c:70:b5:56:11:bb:0c:30:e7:9a:f5:ec:db: 03:e4:0e:57:49:14:08:69:d4:ec:1d:1a:af:e6:5b:f6:8d:3c: d3:69:a8:d2:01:5c:6d:14:48:d3:e7:31:3f:65:1f:32:7b:e6: d5:8f:bc:38:62:e1:ad:f5:89:b3:d4:e2:dc:9a:88:1f:e1:6d: f9:00:53:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvZ7v1wcYxZR5lr1uWTy4ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjODJkMmM3ZWI1ZmE1NDNlMzJmMWVlZTE5Y2QzNWE1Njcz Y2ZhZTYwHhcNMjUxMjE4MDMwMTI2WhcNMjUxMjE5MDMwMTI2WjAzMTEwLwYDVQQD EyhmMGI2NTQ1MjZiNDZmYjliYmQxYTg2NjEzZTAwYjQyMDMzNGEyM2VhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7QIn8ca8oIb0WC+6uT9h/Ng3gIgC FnQJJYlPviykj5iNpAAXbRH1NCxbaOfqIV4gw4WMVuPE7Enl8bNiDGH3LoQapU9H nTecV8E6js2JMSHr35Vc7LKOwKhjdNc0nodxMZIVIi5hn19zqkd4OPQPnqjZVkhY VxLY2m3wKbp7oLX7IlThbhADvdwYHtGdFf+FVxwmMHi5yCpW0BdpYM2ytRt/B5Z/ S/RsTMnNFqy1CNBgONeWG+6hVJ5oVbu6ILlEsDWmSguJhEv2G2ZXpLE5Z+1NSPz+ aF52dCbt/vSDzNANWSFjw4mfIceh10f4sJ2A2GUHzuOZBkXFcj4PsSzzlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPC2VFJrRvubvRqGYT4AtCAzSiPqMB8GA1UdIwQY MBaAFNyC0sfrX6VD4y8e7hnNNaVnPPrmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0lMU3gtdGZwVVBqTHg3dUdjMDFwV2M4LXVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC84NDJiNWItOTg1Yy00NGQ3LTk1OTgt MDM5ZGVhNTA2OTRlLzEvM0lMU3gtdGZwVVBqTHg3dUdjMDFwV2M4LXVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC84NDJiNWItOTg1Yy00NGQ3LTk1OTgtMDM5ZGVhNTA2OTRl LzEvM0lMU3gtdGZwVVBqTHg3dUdjMDFwV2M4LXVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbRL0Y8nj M6bvkf4o3ic3NB3B/DcgY/Bjq5ORJkfB6nEp6NFlgqS4yjfLTHLe/nws75N6o9Cj ooKdh7rT3ynHYdgc54sKTw6c5BfIrg7a9ruTTTdUdEXMKzSy5OsaZslmbse01QPY Ot3BgmSdkPNDJvvkOXv5i3sMhHASi6gRxGuwyz6R+x4empl9lFVe3TGL5n8eQbTT UV1RYd58/vtMhM2WiRUDfSNd9AzMmMO876kpgEXaoWVBZpMscLVWEbsMMOea9ezb A+QOV0kUCGnU7B0ar+Zb9o0802mo0gFcbRRI0+cxP2UfMnvm1Y+8OGLhrfWJs9Ti 3JqIH+Ft+QBTNg== -----END CERTIFICATE-----Generated at Thu Dec 18 07:05:06 2025 by rpki-client